Community
The open-source edition, on your servers
$0
Forever. No card, no limit on users.
- Your SARIF scanners, run and deduped
- Unlimited projects and users
- API, CLI, MCP server and SSO included
Start free. Pay as you grow.
VibeDefend: free to try, priced with you after a pilot. CybeDefend Platform: free to self-host, or per developer on Cloud.
Cloud
Hosted by us, with our own scanners
Per developer
3 projects included per developer.
- Everything in Community, hosted for you
- Our scanners, rules, AI triage and AutoFix
- EU (SecNumCloud) or US region
Enterprise
For organisations and their auditors
On quote
Yearly contract or usage budget
- Several organisations, fine-grained roles, SCIM
- Audit logs to your SIEM, security gates
- On-premise or air-gapped, committed support
Startups get Cloud months free: 6 when incubated and not yet funded, 3 from seed to series A. Apply
Free
To try it on your code
$0
No card
- Claude Code, Cursor, Codex, Copilot, Windsurf
- Your rules before every edit
- Guards in Claude Code, Cursor and Codex
Business
For teams
Let's talk
A pilot, then a price that fits
- A pilot on your repositories
- A price set on your usage
- Guidance from our team
Cloud grows with your team.
Features open as the team grows: no plan to pick, no step to climb.
In every Cloud workspace
- Our scanners and rules
- AI triage and AutoFix
- EU or US region, backups
Team, from 3 developers
- Jira, Linear and Slack
- Team roles and project owners
- Pull-request comments and checks
Scale, from 15 developers
- Security reports and fix times by severity
- Priority scoring across every project
- Priority support
Compare every planHide the comparison
| Feature | CommunityOpen source | Cloud1 to 2 developers | TeamFrom 3 developers | ScaleFrom 15 developers | EnterpriseOn quote |
|---|---|---|---|---|---|
| Price and limits | |||||
| Price | Free | Per active developer | Per active developer | Per active developer | On quote |
| Projects included | Unlimited | 3 per developer | 3 per developer | 3 per developer | In the contract |
| Each extra project | No charge | Priced with you | Priced with you | Priced with you | In the contract |
| Static scans (SAST/SCA/IaC/Secrets) | Unlimited | Unlimited | Unlimited | Unlimited | Unlimited |
| Hosting | Your servers | EU (SecNumCloud) or US | EU (SecNumCloud) or US | EU (SecNumCloud) or US | On-premise, air-gapped or our cloud |
| Billing | Free, forever | Monthly, or yearly with one month free | Monthly, or yearly with one month free | Monthly, or yearly with one month free | Yearly contract or usage budget |
| Scanners | |||||
| Your own scanners, through SARIF | Included | Included | Included | Included | Included |
| SAST: static analysis with reachability | Not included | Included | Included | Included | Included |
| SCA: dependencies and license risk | Not included | Included | Included | Included | Included |
| Secret detection: leaked tokens caught before the commit | Not included | Included | Included | Included | Included |
| License compliance: open-source license risk, classified | Not included | Included | Included | Included | Included |
| IaC: Terraform, CloudFormation, Ansible, Kubernetes | Not included | Included | Included | Included | Included |
| CI/CD: GitHub Actions, GitLab CI, Jenkinsfile, Tekton | Not included | Included | Included | Included | Included |
| Container security: image scanning and runtime context | Not included | Not included | Included | Included | Included |
| AI-BOM: discovery and inventory (EU AI Act, NIST AI RMF) | Not included | Not included | Not included | Included | Included |
| BLSA (business-logic security) | Not included | Not included | Not included | Early access | Included |
| Triage and fix | |||||
| Deduplication across scanners | Included | Included | Included | Included | Included |
| Ranking by reachability | Included | Included | Included | Included | Included |
| History of every finding | Included | Included | Included | Included | Included |
| AI triage and AutoFix | Not included | Included | Included | Included | Included |
| Cybe Security Champion (IDE copilot) | Not included | Included | Included | Included | Included |
| Zero-Day Threat Monitoring | Not included | Included | Included | Included | Included |
| Business-context engine | Not included | Not included | Basic | Advanced | Custom |
| Priority scoring across every project | Not included | Not included | Not included | Included | Included |
| Integrations | |||||
| GitHub & GitLab | Included | Included | Included | Included | Included |
| IDE plugins (VS Code, JetBrains, Cursor, Claude Code) | Included | Included | Included | Included | Included |
| API, CLI and MCP server | Included | Included | Included | Included | Included |
| CI/CD (GitHub Actions, GitLab CI, Jenkins, Azure DevOps, Bitbucket Pipelines) | Included | Included | Included | Included | Included |
| SSO with OIDC | Included | Included | Included | Included | Included |
| Slack integration | Not included | Not included | Included | Included | Included |
| Task management (Jira, Linear) | Not included | Not included | Included | Included | Included |
| Issue tracking (GitHub Issues, GitLab Issues) | Not included | Not included | Included | Included | Included |
| Pull-request comments and checks | Not included | Not included | Included | Included | Included |
| Container Registries (Docker Hub, GCR, ACR, Quay, GitHub/GitLab Registries, AWS ECR, Harbor, JFrog) | Not included | Not included | Included | Included | Included |
| SSO / SAML | Not included | Not included | Not included | Not included | Included |
| Audit logs to your SIEM | Not included | Not included | Not included | Not included | Included |
| Governance | |||||
| Team roles and project owners | Not included | Not included | Included | Included | Included |
| Security Policies | Not included | Not included | Not included | Included | Included |
| Security reports and fix times by severity | Not included | Not included | Not included | Included | Included |
| SBOM generation (CycloneDX, SPDX) | Not included | Not included | Not included | Included | Included |
| Report retention | Not included | Not included | Not included | 90 days | 365 days |
| Reports by Scanner Type | Not included | Not included | Not included | Not included | Included |
| Several organisations, fine-grained roles, SCIM | Not included | Not included | Not included | Not included | Included |
| Security gates | Not included | Not included | Not included | Not included | Included |
| Support | |||||
| Community support | Included | Included | Included | Included | Included |
| Email support | Not included | Included | Included | Included | Included |
| Response time | Best effort | Best effort | Within 72 hours | Within 24 hours | 24/7 Priority |
| Dedicated Slack channel | Not included | Not included | Not included | Included | Included |
| Onboarding workshop | Not included | Not included | Not included | Included | Included |
| Account manager | Not included | Not included | Not included | Not included | Included |
| Uptime SLA | Your infrastructure | Best effort | Best effort | Best effort | 99.5% |
| Roadmap influence | Not included | Not included | Not included | Quarterly | Direct |
What it saves you.
8×
fewer deviations from your rules
3×
fewer flaws introduced
89%
of your precise rules applied, against 12% without
Controlled study, 30 tasks, 24 August 2026. Calculate it for your team
Questions
Can I try VibeDefend for free?
Yes. Sign in and run the install command: VibeDefend joins Claude Code, Cursor, Codex, GitHub Copilot and Windsurf. No card.
How much does VibeDefend cost?
The price depends on what your agents use. We set it with you after a free trial or a pilot, so it fits your real usage. Write to us to talk about it.
How does a pilot work?
We frame the test with your team, on your repositories and with the agents you use, and agree on what we measure. At the end, you have the figures of your own codebase.
Where is my data hosted?
In the EU on SecNumCloud-qualified infrastructure, or in the US: you choose at sign-up. Enterprise can also run on your premises or air-gapped.
How is the Cloud price calculated?
Cloud is priced per active developer, with 3 projects included per developer; ask us for your price. Features open with the size of your team: Team from 3 developers, Scale from 15. Billed yearly, one month is free.
What is an active developer?
Anyone who pushed code to a project on the platform in the last 90 days. People who only read results, in security or management, are not counted.
What counts as a project?
A repository, or a group of repositories you track together. Each developer brings 3 projects; the price of each extra project is set with you.
Is Community really free?
Yes, forever. It runs on your servers with the scanners you choose, with no limit on projects or users, SSO included. We earn our living from the cloud, Enterprise and VibeDefend, and what is open stays open.
Can I pay yearly?
Yes. Cloud billed yearly gives one month free.